Lucene search
ProgressSoftwareCVELIST:CVE-2024-2448HistoryMar 22, 2024 - 1:32 p.m.
CVE-2024-2448 LoadMaster Command Injection Vulnerability
2024-03-2213:32:43
CWE-78
ProgressSoftware
www.cve.org
loadmaster
command injection
vulnerability
ui
shell command
CVSS3
8.4
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
EPSS
0
Percentile
9.6%
An OS command injection vulnerability has been identified in LoadMaster. An authenticated UI user with any permission settings may be able to inject commands into a UI component using a shell command resulting in OS command injection.
CNA Affected
[
{
"defaultStatus": "affected",
"modules": [
"LoadMaster",
"Multi-Tenancy"
],
"product": "LoadMaster",
"vendor": "Progress Software",
"versions": [
{
"lessThan": "7.2.59.3 ( LoadMaster GA)",
"status": "affected",
"version": "7.2.55.0",
"versionType": "semver"
},
{
"lessThan": "7.2.54.9 ( LoadMaster LTSF)",
"status": "affected",
"version": "7.2.49.0",
"versionType": "semver"
},
{
"lessThan": "7.2.48.11 (LoadMaster LTS)",
"status": "affected",
"version": "7.2.48.10",
"versionType": "semver"
},
{
"lessThan": "7.1.35.11 (LoadMaster MT)",
"status": "affected",
"version": "7.1.35.10",
"versionType": "semver"
}
]
}
]Related
cve
cve
CVE-2024-2448
2024-03-22 14:15:08
nvd
nvd
CVE-2024-2448
2024-03-22 14:15:08
vulnrichment
vulnrichment
CVE-2024-2448 LoadMaster Command Injection Vulnerability
2024-03-22 13:32:43
rhino
rhino
CVE-2024-2448: Authenticated Command Injection In Progress Kemp LoadMaster
2024-04-16 14:00:00
CVSS3
8.4
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
EPSS
0
Percentile
9.6%
Related for CVELIST:CVE-2024-2448